{"podcast":{"title":"BEAM There, Done That","slug":"beam-there-done-that-7725251","podcast_index_feed_id":7725251,"rss_url":"https://anchor.fm/s/10f787368/podcast/rss","website_url":"https://podcasters.spotify.com/pod/show/beamtheredonethat","image_url":"https://d3t3ozftmdmh3i.cloudfront.net/staging/podcast_uploaded_nologo/45445194/45445194-1772070691483-c305179ad8028.jpg","author":"Plangora","episode_count":22,"summary":"BEAM There, Done That is a podcast about building real systems with Elixir, Erlang, and the BEAM. We’ve built it before — distributed systems, fault‑tolerant services, event pipelines, real‑time apps, production nightmares, and the supervision trees that saved them. Each episode dives into practical lessons from shipping software on the BEAM: architecture decisions, scaling challenges, operational failures, and the patterns that actually work. No hype. No theory without scars. Just hard‑won experience from engineers who’ve been there.","last_synced_at":"2026-07-31T20:20:07.510585+00:00","page_url":"https://stenobird.com/podcast/beam-there-done-that-7725251"},"episode":{"title":"AI Found 5 CVEs in One Afternoon — The BEAM Security Wake-Up Call | Peter Ullrich & Jonathan Machen","slug":"ai-found-5-cves-in-one-afternoon-the-beam-security-wake-up-call-peter-ullrich-jonathan-machen","published_at":"2026-05-29T10:00:00+00:00","page_url":"https://stenobird.com/podcast/beam-there-done-that-7725251/ai-found-5-cves-in-one-afternoon-the-beam-security-wake-up-call-peter-ullrich-jonathan-machen","show_page_url":"https://stenobird.com/podcast/beam-there-done-that-7725251","url":"https://podcasters.spotify.com/pod/show/beamtheredonethat/episodes/AI-Found-5-CVEs-in-One-Afternoon--The-BEAM-Security-Wake-Up-Call--Peter-Ullrich--Jonathan-Machen-e3jtbot","audio_url":"https://anchor.fm/s/10f787368/podcast/play/120548573/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-4-26%2F424898832-44100-2-ce1a178018a86.mp3","summary":"The BEAM ecosystem spent decades flying under the radar - too niche to attract serious attackers. That era is over. In this episode, we sit down with Peter Ullrich, the developer who ran a $10 experiment at ElixirConf EU in Málaga and discovered a vulnerability that could crash the BEAM with a 13-character string - with zero prior security experience. Then we hear from Jonathan Machen, CISO of the Erlang Ecosystem Foundation, whose job is to catch and coordinate everything Peter finds. We cover: How Peter built a simple bash script that scanned the most-downloaded Hex packages - and what he found Why LLMs have changed the cost and skill floor for vulnerability research forever The CVE disclosure process: what happens from the moment a bug is found to the moment it's published How the EEF's CNA went from 9 CVEs in a year to more in a single week What library maintainers should do right now (spoiler: it's three clicks on GitHub) The AGES initiative, supply chain security, and the gap between what's been built and what the moment demands Why paying a vendor like Trivy isn't enough - and what actually needs to happen If you run Phoenix in production, this episode is required listening. Resources mentioned: Peter's blog post and prompts: github.com/pultrich (linked in post) Linux Foundation's Scrutineer project Report vulnerabilities: cna@erlef.org Support the Erlang Ecosystem Foundation: erlef.org","meta_description":"The BEAM ecosystem spent decades flying under the radar - too niche to attract serious attackers. That era is over. In this episode, we sit down with Pete…","key_points":[],"chapters":[],"topics":[],"duration_seconds":3749,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/beam-there-done-that-7725251/episodes/ai-found-5-cves-in-one-afternoon-the-beam-security-wake-up-call-peter-ullrich-jonathan-machen/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/beam-there-done-that-7725251/ai-found-5-cves-in-one-afternoon-the-beam-security-wake-up-call-peter-ullrich-jonathan-machen.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}